Act as Incident first responder for a 24/7 staffed SOC
Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
Monitor security sensors and review logs to identify network anomalies or intrusions
Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices
Escalate security incidents using established policies and procedures in a timely manner
Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)
Perform initial analysis of security events, network traffic, and logs
Assist with the development of incident response plans, workflows, and SOPs
Work directly with threat intelligence analysts to convert intelligence into useful detection
Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications
Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.
Act as a liaison party for configured alerts to monitor performance of security sensors and tools
Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management
>
Requirements
Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
Basic, yet sound technical understanding of operating systems, network architecture and design
Basic, yet sound knowledge of encryption, key management and cryptology
Proven ability to plan and prioritize work, both their own and that of project team
Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization
Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions
Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff
Results Oriented
Able to commit at least a 6 months internship
Preferred Skills /Qualities
Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage
>
For interested applicants, please send in your resume to magdalene_ho@ensigninfosecurity.com
}
Only shortlisted candidates will be contacted.
PT Ensign InfoSecurity Indonesia Menara Sentraya 10th Floor Unit A4 Jl. Iskandarsyah Raya No. 1A Kec. Kebayoran Baru Jakarta 12160, Indonesia